
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/35392e3135332e352e302f32342d3234203d3e203233373731.roa
File: 35392e3135332e352e302f32342d3234203d3e203233373731.roa (raw, json)
Hash identifier: hC8SaJLt4oaYUtWrd50kicdXJYn+a56+Ny0dOE0MZLE=
Subject key identifier: 14:CD:CA:15:12:A2:C2:FD:45:19:97:E3:A3:F9:38:7F:96:D6:68:80
Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial: 6346B091644AD0C916D746EF8AC7C4801E7B092D
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/35392e3135332e352e302f32342d3234203d3e203233373731.roa
Signing time: Mon 20 Apr 2026 02:22:23 +0000
ROA not before: Mon 20 Apr 2026 02:17:23 +0000
ROA not after: Mon 19 Apr 2027 02:22:23 +0000
asID: 23771
IP address blocks: 59.153.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:46:b0:91:64:4a:d0:c9:16:d7:46:ef:8a:c7:c4:80:1e:7b:09:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Validity
Not Before: Apr 20 02:17:23 2026 GMT
Not After : Apr 19 02:22:23 2027 GMT
Subject: CN=14CDCA1512A2C2FD451997E3A3F9387F96D66880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:79:76:bf:0e:58:dd:35:94:6d:58:8b:dd:
27:a0:a7:e3:a4:42:ea:55:3b:91:7f:d2:e8:37:e6:
13:9c:39:b8:e6:f6:87:d9:98:95:ee:9b:ff:49:31:
aa:85:77:fc:e4:a6:7d:31:c5:98:80:2e:5f:c3:80:
60:64:49:1a:c4:26:87:16:87:9e:61:fc:8b:0b:21:
70:f3:10:fe:d0:8c:fb:e0:16:4c:07:5b:b2:d9:10:
0d:e2:70:92:b8:fd:93:fb:44:04:4d:ba:e6:5d:32:
3b:b8:15:83:aa:8a:50:c5:de:d7:b6:84:13:94:c0:
76:53:9c:88:8b:e5:cc:ce:fa:cc:1a:1d:f8:4a:df:
ce:24:c4:41:2c:4c:8b:07:7c:a3:f0:2e:e7:e0:8a:
e2:b6:b1:59:2c:11:de:1f:c3:6e:59:6c:7b:02:20:
2a:8c:23:c2:bd:b5:0a:77:18:a1:47:55:73:da:ec:
78:4a:fd:53:93:0e:c5:2d:ae:d2:98:8e:59:2e:4e:
09:2f:ac:53:d8:51:8f:70:43:22:16:d5:b5:c4:49:
85:20:0b:c6:dc:fe:13:8a:1f:3c:9b:98:fe:be:bb:
13:53:da:a2:da:b3:44:02:d9:01:7f:e5:e9:26:ce:
81:10:fe:95:a2:c1:11:fc:29:3e:eb:ec:5c:bc:7e:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CD:CA:15:12:A2:C2:FD:45:19:97:E3:A3:F9:38:7F:96:D6:68:80
X509v3 Authority Key Identifier:
keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/35392e3135332e352e302f32342d3234203d3e203233373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.5.0/24
Signature Algorithm: sha256WithRSAEncryption
93:41:46:88:c0:c7:e4:d3:78:20:8d:c0:1c:4a:09:19:e2:9d:
fa:0d:23:58:55:05:4d:1d:8e:4b:de:1e:74:90:dc:47:d1:f1:
d3:d2:bb:99:64:4b:59:33:67:83:b7:c6:69:c0:4e:6d:45:dd:
33:e8:13:63:d7:77:fa:04:70:3d:14:e0:75:d0:3d:b4:1d:58:
f3:1e:48:e0:50:51:ef:32:47:07:81:4c:e3:f6:18:33:90:75:
6c:09:70:22:07:2b:a1:0c:76:a3:fa:13:2c:2e:a8:7f:63:9d:
b7:c7:13:59:d7:95:49:0a:50:d1:0e:cd:ad:1a:8d:36:ba:b4:
dd:44:ce:4e:f3:24:ec:d9:6f:1a:6d:c4:7d:1f:15:75:6c:6c:
b6:78:18:fd:d2:c5:9d:66:cb:91:f3:51:d2:6d:5a:00:b9:c1:
01:67:fb:28:bd:ee:b1:5b:2b:0e:f1:f1:3b:c0:e3:8b:03:bb:
8b:ab:4d:66:bf:79:11:0c:2d:5b:87:3a:17:96:42:7d:8e:af:
00:45:52:01:84:27:29:17:48:57:92:d1:09:2c:81:ad:d8:d9:
10:78:3e:b8:38:8f:de:43:ca:e2:85:78:b3:20:6c:66:e6:7e:
fd:9a:39:e9:3e:ad:22:2f:5e:0c:37:71:3c:88:1b:83:50:4f:
d9:10:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:53:45 2026 by rpki-client